Privacy Policy

• Identity & account: your name, phone number, employee ID, role, and assigned store or cluster (and email where applicable).
• Location (attendance): precise GPS location, captured only while the app is open and only when you self-mark attendance, to confirm you are at your assigned store. A few short location samples are read at that moment to detect location spoofing. For store staff we do not track location in the background.
• Location (Store and Cluster Managers only): if your role is Store Manager or Cluster Manager and location tracking is on, precise location recorded in the background, including when the app is closed or not in use, as a location point every few minutes while you are moving, through your working day. Where a Cluster Manager turns on automatic check-in, the app also records when you arrive at and leave your stores. See section 3.
• Camera / selfie: a photo captured when you mark attendance, used to verify it is really you (to prevent buddy-punching). Captured with your consent.
• Device & technical: device model and OS, app version, a push-notification token (to send shift and attendance reminders), and diagnostic/crash logs.
• Work records: the attendance marks, leave requests, and operational entries you make in the app.
• Payroll data (where enabled): some employers use Kyro for payroll; where that is enabled, bank and KYC details are collected for payroll and stored in encrypted or masked form.

• Verify and record attendance (location + selfie).
• For Store and Cluster Managers, verify field presence, store visits, and the route between stores.
• Manage shifts, rosters, leave, and workforce operations.
• Prevent fraud and misuse (identity verification, spoof detection).
• Send operational notifications you would expect.
• Payroll and statutory compliance, where enabled.
• Keep the service secure and improve reliability.

Attendance. For store staff, location is used only to confirm store presence at the moment you mark attendance, and is never collected in the background. Your attendance selfie is used only to verify your identity for that mark.

Manager location tracking. Store Managers and Cluster Managers travel between the stores they are responsible for. For these roles only, the app can record location in the background, including when the app is closed or not in use, so that your employer can verify your field presence, your store visits, and the route between stores. Before any background location is collected, the app shows you what it collects and why, and records your consent under the Digital Personal Data Protection Act, 2023. On Android a persistent notification is shown the whole time it runs. On iPhone you can turn it off in the app at any time. You can withdraw consent at any time through your employer or HR, after which background collection stops.

Location, selfie, and biometric data are never sold and never used for advertising. Manager location is shared only with your employer. Where face verification is used, it is done with your consent, and the images are kept only as long as needed to verify attendance before being deleted on an automated schedule.

• Your employer: the organization that provides Kyro to you.
• Service providers who operate the app strictly on our instructions: cloud hosting and database, push notifications and app updates, SMS delivery, and analytics/error monitoring.
• Authorities, where required by law.